feat: add nginx reverse proxy

2026-06-24 08:59:35 +02:00
parent 8155d94fee
commit b36cd2a754
14 changed files with 228 additions and 37 deletions
@@ -0,0 +1,49 @@
+map $http_upgrade $connection_upgrade {
+    default upgrade;
+    "" close;
+}
+
+server_tokens off;
+
+upstream wagtail_backend {
+    server backend:8000;
+    keepalive 16;
+}
+
+upstream astro_frontend {
+    server frontend:4321;
+    keepalive 16;
+}
+
+server {
+    listen 80 default_server;
+    server_name _;
+
+    return 404;
+}
+
+server {
+    listen 80;
+    server_name azionelab.org;
+
+    client_max_body_size 10m;
+
+    proxy_http_version 1.1;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection $connection_upgrade;
+
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+
+    location ~ ^/(admin|api|documents|health|media|static)(/|$) {
+        proxy_pass http://wagtail_backend;
+    }
+
+    location / {
+        proxy_pass http://astro_frontend;
+    }
+}